Skip to content
OpenAdvisories
Medium · 5.1 CVE-2020-10723 EUVD-2020-3150GHSA-4gq2-9rxc-45pg

A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payloa…

Published May 19, 2020 · Updated Aug 4, 2024 · Assigned by redhat

Vendor: [UNKNOWN] Product: dpdk Package: ceph Package: dpdk Package: dpdk Package: openvswitch Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.

Affected products

VendorProductAffectedFixed
[UNKNOWN] dpdk 20.02.1, 19.11.2, 18.11.8 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 dpdk 19.11.2-1 —
Debian 13 dpdk 19.11.2-1 —
Debian 12 dpdk 19.11.2-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS dpdk 19.11.1-0ubuntu1.1 USN-4362-1
Ubuntu 18.04 LTS dpdk 17.11.9-0ubuntu18.04.2 USN-4362-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 8 dpdk +3 19.11.3-1.el8 RHSA-2020:4806
RHEL 8 openvswitch2.11 +4 2.11.0-54.20200327gita4efc59.el8fdp RHSA-2020:2297
RHEL 8 openvswitch2.13 +4 2.13.0-25.el8fdp.1 RHSA-2020:2295
RHEL 7 openvswitch +7 2.9.0-130.el7fdp RHSA-2020:2298
RHEL 7 openvswitch2.11 +3 2.11.0-54.20200327gita4efc59.el7fdp RHSA-2020:4114, RHSA-2020:2296
RHEL 7 ovn2.11 +2 2.11.1-44.el7fdp RHSA-2020:4114
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhev Manager 4 openvswitch2.11 +2 2.11.0-54.20200327gita4efc59.el7fdp RHSA-2020:4114
Red Hat Rhev Manager 4 ovn2.11 +2 2.11.1-44.el7fdp RHSA-2020:4114
Red Hat Rhel Extras Other 7 dpdk +3 18.11.8-1.el7_8 RHSA-2020:2683
Red Hat OpenStack 13 openvswitch-selinux-extra-policy 1.0-17.el7fdp RHSA-2021:0931
Red Hat OpenStack 13 openvswitch2.11 +3 2.11.3-77.el7fdp RHSA-2021:0931
Red Hat OpenStack 13 ovn2.11 +3 2.11.1-57.el7fdp RHSA-2021:0931

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP1 dpdk 18.11.3-4.6.2 SUSE-SU-2020:1335-1
SLES 15 dpdk +1 18.11.3-3.19.2 SUSE-SU-2020:1334-1
SLES 12 SP5 dpdk +1 18.11.3-3.9.2 SUSE-SU-2020:1552-1
SLES 12 SP4 dpdk +1 17.11.7-5.6.2 SUSE-SU-2020:1430-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 dpdk 18.11.3-3.19.2 SUSE-SU-2020:1334-1
SLES for SAP 12 SP5 dpdk +1 18.11.3-3.9.2 SUSE-SU-2020:1552-1
SLES for SAP 12 SP4 dpdk +1 17.11.7-5.6.2 SUSE-SU-2020:1430-1
SLE HPC 15 dpdk +1 18.11.3-3.19.2 SUSE-SU-2020:1334-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.1 dpdk 18.11.3-lp151.3.4.1 openSUSE-SU-2020:0693-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 openvswitch 2.12.1-r0 —
Alpine v3.23 openvswitch 2.12.1-r0 —
Alpine v3.22 openvswitch 2.12.1-r0 —
Alpine v3.21 openvswitch 2.12.1-r0 —
Alpine v3.20 openvswitch 2.12.1-r0 —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 openvswitch 2.12.1-r0 —
Alpine v3.18 openvswitch 2.12.1-r0 —
Alpine v3.17 openvswitch 2.12.1-r0 —
Alpine v3.16 openvswitch 2.12.1-r0 —
Alpine v3.15 openvswitch 2.12.1-r0 —
Alpine v3.14 openvswitch 2.12.1-r0 —
Alpine v3.13 openvswitch 2.12.1-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 ceph 18.2.2-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 dpdk +3 19.11.3-1.el8 ELSA-2020-4806

Advisories 15

References